Privacy Policy

what it is used for

This privacy policy governs the manner in which BCPI treats your personal information which is obtained electronically when you use this website or contact us electronically. It is for this website bcpi.org.bw and served by BCPI and governs the privacy of its users who choose to use it.We reserve the right, in our sole discretion to amend this Privacy Policy from time to time. By continuing to access this site you agree to be bound by them.

The policy sets out the different areas where user privacy is concerned and outlines the obligations & requirements of the users, the website and website owners. Furthermore the way this website processes, stores and protects user data and information will also be detailed within this policy.Personal information means all information of a personal nature which identifies you as the source of the information and can expose you when this was not anticipated by you. This could take place through your identification, your cell number; email address and the use of social media..

Information we collect

Information we collect when you visit our website

We collect and use information from website visitors in accordance with this section and the section entitled Disclosure and additional uses of your information.

Web server log information

We use a third party server to host our website. Our website server automatically logs the IP address you use to access our website as well as other information about your visit such as the pages accessed, information requested, the date and time of the request, the source of your access to our website (e.g. the website or URL (link) which referred you to our website), and your browser version and operating system.

Our website servers are located in Botswana and the United States of America and, accordingly, your information is transferred outside the European Economic Area (EEA). For further information and information on the safeguards used, please see the section of this privacy policy entitled Transfers of your information outside the European Economic Area.

Use of website server log information for IT security purposes

Our third party hosting provider collect(s) and store(s) server logs to ensure network and IT security and so that the server and website remain uncompromised. This includes analyzing log files to help identify and prevent unauthorized access to our network, the distribution of malicious code, denial of services attacks and other cyber attacks, by detecting unusual or suspicious activity.

Unless we are investigating suspicious or potential criminal activity, We/we do not make, nor do we allow our hosting provider to make, any attempt to identify you from the information collected via server logs.

Legal basis for processing: compliance with a legal obligation to which we are subject (Article 6(1)(c) of the General Data Protection Regulation).
Legal obligation: we have a legal obligation to implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk of our processing of information about individuals. Recording access to our website using server log files is such a measure.

Legal basis for processing: our and a third party’s legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interests: we and our third party hosting provider have a legitimate interest in using your information for the purposes of ensuring network and information security.

Cookies and similar technologies

Cookies are data files which are sent from a website to a browser to record information about users for various purposes.

We use cookies and similar technologies on our website, including essential, functional, analytical and advertising cookies and web beacons. For further information on how we use cookies, please see our cookies policy which is available here: https://bcpi.org.bw/cookie-policy/

Information we collect when you contact us

We collect and use information from individuals who contact us in accordance with this section and the section entitled Disclosure and additional uses of your information.

Email and Contact Form

When you send an email to the email address displayed on our website we collect your email address and any other information you provide in that email (such as your name, telephone number and the information contained in any signature block in your email).

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest(s): responding to enquiries and messages we receive and keeping records of correspondence.

Legal basis for processing: necessary to perform a contract or to take steps at your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why necessary to perform a contract: where your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services (for example, providing you with information about such goods and services), we will process your information in order to do so).

Transfer and storage of your information

We use a third party email provider/customer service management tool to store emails and messages you send us. Our third party email provider is Gmail (Google Mail). located in the United States. Their privacy policy is available here https://policies.google.com/

Emails you send us will be stored outside the European Economic Area on our third-party email provider’s servers in the United States and other locations based on their sub-processors. For further information please see the section of this privacy policy entitled Transfers of your information outside the European Economic Area.

Mail

If you contact us by mail, we will collect any information you provide to us in any postal communications you send us.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation)
Legitimate interest(s): responding to enquiries and messages we receive and keeping records of correspondence.

Legal basis for processing: necessary to perform a contract or to take steps at your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).
Reason why necessary to perform a contract: where your message relates to us providing you with goods or services or taking steps at your request prior to providing you with our goods and services (for example, providing you with information about such goods and services), we will process your information in order to do so).

Information we collect when you interact with our website

We collect and use information from individuals who interact with particular features of our website in accordance with this section and the section entitled Disclosure and additional uses of your information.

E-Newsletter

When you sign up for our e-newsletter on our website or opt to receive news, offers, updates on out-of-stock items from us by entering your name and email address and clicking subscribe or ticking a box at checkout indicating that they would like to receive your e-newsletter, we collect your email address , information about your browser, information about the page you signed up on, and any other additional information you may provide to us.

Legal basis for processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).
Consent: you give your consent to us sending you our e-newsletter by signing up to receive it using the steps described above.

Use of web beacons and similar technologies in emails

We use technologies such as web beacons (small graphic files) in the emails we send to allow us to assess the level of engagement our emails receive by measuring information such as the delivery rates, open rates and click through rates which our emails achieve. We will only use web beacons in our emails if you have consented to us doing so.

Registering on our website

When you register and create an account on our website, we collect the following information: Email address, IP address, and any other information you provide to us when you complete the registration form.

If you do not provide the mandatory information required by the registration form, you will not be able to register or create an account on our website.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).
Legitimate interest: registering and administering accounts on our website to provide access to content, secure access to order history and status for customers and to facilitate the running and operation of our business.

Transfer and storage of your information

Information you submit to us via the registration form on our website will be stored outside the European Economic Area on our third party hosting provider’s servers in Botswana and The United States. Our third party hosting provider is Verbosec with servers located throughout North America and where its sub-processors may be located. Their privacy policy is available here: https://verbosec.com/privacy-policy

For further information about the safeguards used when your information is transferred outside the European Economic Area, see the section of this privacy policy below entitled Transfers of your information outside the European Economic Area.

Disclosure of your information to other third parties

We disclose your information to other third parties in specific circumstances, as set out below.

Providing information to third parties such as Google Inc. Google collects information through our use of Google Analytics on our website. Google uses this information, including IP addresses and information from cookies, for a number of purposes, such as improving its Google Analytics service. Information is shared with Google on an aggregated and anonymised basis. To find out more about what information Google collects, how it uses this information and how to control the information sent to Google, please see the following page: https://www.google.com/policies/privacy/partners/]

How we secure your information

We take appropriate technical and organisational measures to secure your information and to protect it against unauthorised or unlawful use and accidental loss or destruction, including:

only sharing and providing access to your information to the minimum extent necessary, subject to confidentiality restrictions where appropriate, and on an anonymised basis wherever possible;using secure servers to store your information;verifying the identity of any individual who requests access to information prior to granting them access to information;
using Secure Sockets Layer (SSL) software to encrypt any information you submit to us via any forms on our website and any payment transactions you make on or via our website;only transferring your information via closed system or encrypted data transfers

Transmission of information to us by email

Transmission of information over the internet is not entirely secure, and if you submit any information to us over the internet (whether by email, via our website or any other means), you do so entirely at your own risk.

We cannot be responsible for any costs, expenses, loss of profits, harm to reputation, damages, liabilities or any other form of loss or damage suffered by you as a result of your decision to transmit information to us by such means.

Transfers of your information outside the European Economic Area

We process data both inside and outside of the United States and rely on legally-provided mechanisms to lawfully transfer data across borders. Countries where we and our data processors process data may have laws which are different, and potentially not as protective, as the laws of your own country.

Your information will be transferred and stored outside the European Economic Area (EEA) in the circumstances set out below. We will also transfer your information outside the EEA or to an international organisation in order to comply with legal obligations to which we are subject (compliance with a court order, for example). Where we are required to do so, we will ensure appropriate safeguards and protections are in place.

Server log information

Information collected when you visit our website is transferred outside of the EEA and stored on the servers of our third party hosting company , Shopify. You can access their privacy policy here: www.shopify.com/privacy

Country of storage: Canada and the United States

Safeguard(s) used: our third party hosting provider has self-certified its compliance with the EU-U.S. Privacy Shield.

Changes to our Privacy Policy

We update and amend our Privacy Policy from time to time.

Minor changes to our Privacy Policy

Where we make minor changes to our Privacy Policy, we will update our Privacy Policy with a new effective date stated at the beginning of it. Our processing of your information will be governed by the practices set out in that new version of the Privacy Policy from its effective date onwards.

Major changes to our Privacy Policy or the purposes for which we process your information

Where we make major changes to our Privacy Policy or intend to use your information for a new purpose or a different purpose than the purposes for which we originally collected it, we will notify you by email (where possible) or by posting a notice on our website.

We will provide you with the information about the change in question and the purpose and any other relevant information before we use your information for that new purpose.

Wherever required, we will obtain your prior consent before using your information for a purpose that is different from the purposes for which we originally collected it.